Interceptor to get JDBCRealm's user role

[Rapthor]

Hello,

is it possible to wrap an interceptor (I hope that's the correct tool for that) around every controller that first checks wether the user in the current session is allowed to start that controller?

I'm using "JDBCRealm" for authentication measures and ask myself if I have access to the information about the user logged in from within the interceptor.

Thanks in advance.

[Costin Leau]

Yes, you can do that. take a look at acegi (acegi.sf.net) which provides a lot of security features including ACL at method level.